pi-agent-browser-native 0.5.0 → 0.6.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-agent-browser-native",
-  "version": "0.5.0",
+  "version": "0.6.6",
   "description": "pi extension that exposes agent-browser as a native tool for browser automation",
   "type": "module",
   "author": "Mitch Fultz (https://github.com/fitchmultz)",

package/scripts/agent-browser-capability-baseline.mjs

@@ -3,7 +3,7 @@
  * Responsibilities: Combine the canonical target from agent-browser-target.mjs with sampled help commands and verifier/doc token expectations.
  * Scope: Versioned capability metadata only; it does not execute agent-browser or validate documentation by itself.
  * Usage: Imported by command-reference verifier, generated docs checker, and tests when upstream agent-browser is re-baselined; runtime imports only agent-browser-target.mjs.
- * Invariants/Assumptions: This package targets the current installed upstream agent-browser only and does not keep compatibility shims for older versions.
+ * Invariants/Assumptions: This package documents the current recommended upstream release, accepts stable runtimes at or above the configured floor, and does not add version-specific compatibility shims.
  * Related: `docs/SUPPORT_MATRIX.md` maps `CAPABILITY_BASELINE.inventorySections` to human docs, runtime behavior, tests, and verification gates; refresh that matrix whenever this baseline changes.
  */
 
@@ -16,8 +16,8 @@ export const COMMAND_REFERENCE_BASELINE_BLOCK_IDS = Object.freeze(["upstream-bas
 
 const sourceEvidence = Object.freeze({
   repository: "vercel-labs/agent-browser",
-  upstreamHead: "548b159b30eef119ccf6846c8bc807d0eaa3f6f8",
-  upstreamPackageVersion: "0.34.0",
+  upstreamHead: "eb05921bad874cd2a1b4fa5d1149f1ed26576cae",
+  upstreamPackageVersion: "0.36.0",
   inspectedSources: Object.freeze([
     "agent-browser --version",
     "agent-browser --help",
@@ -28,10 +28,14 @@ const sourceEvidence = Object.freeze({
     "agent-browser skills list",
     "agent-browser skills get core --full",
     "agent-browser skills get derive-client --full",
+    "agent-browser skills get webmcp-gen --full",
     "README.md",
     "CHANGELOG.md",
     "agent-browser.schema.json",
+    "bin/agent-browser.js",
+    "cli/src/ca_bundle.rs",
     "cli/src/commands.rs",
+    "cli/src/mcp.rs",
     "cli/src/flags.rs",
     "cli/src/read.rs",
     "cli/src/doctor/webgpu.rs",
@@ -40,14 +44,25 @@ const sourceEvidence = Object.freeze({
     "cli/src/native/browser.rs",
     "cli/src/native/tab_binding.rs",
     "cli/src/native/daemon.rs",
+    "cli/src/native/element.rs",
+    "cli/src/native/stream/cdp_loop.rs",
+    "cli/src/native/stream/dashboard.rs",
+    "cli/src/native/test_fixtures/webmcp_frame_probe.html",
+    "cli/src/native/test_fixtures/webmcp_probe.html",
+    "cli/src/native/webmcp.rs",
     "cli/src/output.rs",
     "docs/src/app/webgpu/page.mdx",
+    "docs/src/app/webmcp/page.mdx",
     "docs/src/app/network/page.mdx",
+    "docs/src/app/proxy/page.mdx",
     "docs/src/app/selectors/page.mdx",
     "docs/src/app/skills/page.mdx",
     "docs/src/app/commands/page.mdx",
     "skill-data/derive-client/SKILL.md",
     "skill-data/core/SKILL.md",
+    "skill-data/protected-vercel-deployments/SKILL.md",
+    "skill-data/webmcp-gen/SKILL.md",
+    "test/launcher.test.mjs",
     "packages/@agent-browser/eve/README.md",
     "packages/@agent-browser/eve/package.json",
     "packages/@agent-browser/eve/test/extension.test.mjs",
@@ -75,6 +90,8 @@ const helpCommands = Object.freeze([
   helpCommand("skills list", ["skills", "list"]),
   helpCommand("core skill full", ["skills", "get", "core", "--full"]),
   helpCommand("vercel sandbox skill full", ["skills", "get", "vercel-sandbox", "--full"]),
+  helpCommand("protected Vercel deployments skill full", ["skills", "get", "protected-vercel-deployments", "--full"]),
+  helpCommand("WebMCP generation skill full", ["skills", "get", "webmcp-gen", "--full"]),
   helpCommand("open help", ["open", "--help"]),
   helpCommand("read help", ["read", "--help"]),
   helpCommand("click help", ["click", "--help"]),
@@ -143,8 +160,11 @@ const inventorySections = Object.freeze([
       "skills get slack",
       "skills get dogfood",
       "skills get vercel-sandbox",
+      "skills get protected-vercel-deployments",
       "skills get agentcore",
       "skills get derive-client",
+      "skills get webmcp-gen",
+      "webmcp.init.js",
       "@agent-browser/sandbox",
       "installSystemDependencies: false",
       "skills path [name]",
@@ -160,10 +180,16 @@ const inventorySections = Object.freeze([
       ["skills list", "slack"],
       ["skills list", "dogfood"],
       ["skills list", "vercel-sandbox"],
+      ["skills list", "protected-vercel-deployments"],
       ["skills list", "agentcore"],
       ["skills list", "derive-client"],
+      ["skills list", "webmcp-gen"],
+      ["WebMCP generation skill full", "webmcp.init.js"],
+      ["WebMCP generation skill full", "agent-browser webmcp invoke <tool> --params @fixture.json"],
       ["vercel sandbox skill full", "@agent-browser/sandbox"],
       ["vercel sandbox skill full", "installSystemDependencies: false"],
+      ["protected Vercel deployments skill full", "x-vercel-trusted-oidc-idp-token"],
+      ["protected Vercel deployments skill full", "vc project token"],
       ["core skill full", "agent-browser frame @e3"],
       ["core skill full", "agent-browser dialog accept"],
       ["core skill full", "agent-browser --session \"$SESSION\" --restore open https://app.example.com"],
@@ -424,6 +450,14 @@ const inventorySections = Object.freeze([
       "cookies set <name> <value> --url <url> --domain <domain> --path <path> --httpOnly --secure --sameSite <Strict|Lax|None> --expires <timestamp>",
       "cookies set --curl <file>",
       "storage <local|session>",
+      "webmcp list",
+      "webmcp invoke <tool>",
+      "webmcp invoke <tool> --params <json|@file>",
+      "webmcp invoke <tool> --frame <frame-id>",
+      "webmcp invoke <tool> --detach",
+      "webmcp invoke <tool> --timeout <ms>",
+      "webmcp result <id>",
+      "webmcp cancel <id>",
       "diff snapshot",
       "diff snapshot --baseline <file> --selector <sel> --compact --depth <n>",
       "diff screenshot --baseline",
@@ -471,6 +505,13 @@ const inventorySections = Object.freeze([
       root("cookies [get|set|clear]"),
       root("cookies set --curl <file>"),
       root("storage <local|session>"),
+      root("webmcp list"),
+      root("webmcp invoke <tool>"),
+      root("--params <json|@file>"),
+      root("--frame <frame-id>"),
+      root("--detach"),
+      root("webmcp result <id>"),
+      root("webmcp cancel <id>"),
       root("diff snapshot"),
       root("diff screenshot --baseline"),
       root("trace start"),
@@ -542,6 +583,8 @@ const inventorySections = Object.freeze([
       "chat <message>",
       "dashboard [start]",
       "dashboard start --port <n>",
+      "dashboard start --allowed-origins <origins>",
+      "AGENT_BROWSER_DASHBOARD_ALLOWED_ORIGINS",
       "dashboard stop",
       "device list",
       "install",
@@ -554,6 +597,7 @@ const inventorySections = Object.freeze([
       "doctor --webgpu --headed",
       "doctor --json",
       "mcp",
+      "mcp --tools core,webmcp",
       "plugin add <ref>",
       "plugin [list]",
       "plugin show <name>",
@@ -569,6 +613,9 @@ const inventorySections = Object.freeze([
       root("deny <id>"),
       root("chat <message>"),
       root("dashboard start --port <n>"),
+      root("dashboard start --allowed-origins <origins>"),
+      ["dashboard help", "--allowed-origins <origins>"],
+      ["dashboard help", "AGENT_BROWSER_DASHBOARD_ALLOWED_ORIGINS"],
       ["device help", "device list"],
       root("install --with-deps"),
       ["install help", "fails if deps fail"],
@@ -653,6 +700,10 @@ const inventorySections = Object.freeze([
       "NO_PROXY",
       "--ignore-https-errors",
       "AGENT_BROWSER_IGNORE_HTTPS_ERRORS",
+      "--ca-cert <path>",
+      "--no-ca-cert",
+      "AGENT_BROWSER_CA_CERT",
+      "AGENT_BROWSER_CLEAR_CA_CERT",
       "--allow-file-access",
       "AGENT_BROWSER_ALLOW_FILE_ACCESS",
       "--hide-scrollbars <bool>",
@@ -660,9 +711,12 @@ const inventorySections = Object.freeze([
       "AGENT_BROWSER_HEADED",
       "--webgpu",
       "AGENT_BROWSER_WEBGPU",
+      "--no-webmcp",
+      "AGENT_BROWSER_NO_WEBMCP",
+      "noWebmcp",
       "AGENT_BROWSER_NO_XVFB",
       "\"webgpu\": true",
-      "--cdp <port>",
+      "--cdp <port|url>",
       "--color-scheme <scheme>",
       "AGENT_BROWSER_COLOR_SCHEME",
       "--download-path <path>",
@@ -799,6 +853,10 @@ const inventorySections = Object.freeze([
       root("NO_PROXY"),
       root("--ignore-https-errors"),
       root("AGENT_BROWSER_IGNORE_HTTPS_ERRORS"),
+      root("--ca-cert <path>"),
+      root("--no-ca-cert"),
+      root("AGENT_BROWSER_CA_CERT"),
+      root("AGENT_BROWSER_CLEAR_CA_CERT"),
       root("--allow-file-access"),
       root("AGENT_BROWSER_ALLOW_FILE_ACCESS"),
       root("--hide-scrollbars <bool>"),
@@ -806,7 +864,9 @@ const inventorySections = Object.freeze([
       root("AGENT_BROWSER_HEADED"),
       root("--webgpu"),
       root("AGENT_BROWSER_WEBGPU"),
-      root("--cdp <port>"),
+      root("--no-webmcp"),
+      root("AGENT_BROWSER_NO_WEBMCP"),
+      root("--cdp <port|url>"),
       root("--color-scheme <scheme>"),
       root("AGENT_BROWSER_COLOR_SCHEME"),
       root("--download-path <path>"),

package/scripts/agent-browser-target.mjs

@@ -1,3 +1,21 @@
 export const TARGET_AGENT_BROWSER_SOURCE = "scripts/agent-browser-target.mjs";
-export const TARGET_AGENT_BROWSER_VERSION = "0.34.0";
+export const TARGET_AGENT_BROWSER_VERSION = "0.36.0";
 export const TARGET_AGENT_BROWSER_VERSION_LABEL = `agent-browser ${TARGET_AGENT_BROWSER_VERSION}`;
+export const MINIMUM_AGENT_BROWSER_VERSION = "0.35.0";
+export const MINIMUM_AGENT_BROWSER_VERSION_LABEL = `agent-browser ${MINIMUM_AGENT_BROWSER_VERSION}`;
+export const SUPPORTED_AGENT_BROWSER_VERSION_LABEL = `${MINIMUM_AGENT_BROWSER_VERSION_LABEL} or newer`;
+
+function stableVersionParts(version) {
+	const match = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.exec(version);
+	return match?.slice(1).map(Number);
+}
+
+export function isSupportedAgentBrowserVersion(version) {
+	const actual = stableVersionParts(version);
+	const minimum = stableVersionParts(MINIMUM_AGENT_BROWSER_VERSION);
+	if (!actual || !minimum) return false;
+	for (let index = 0; index < minimum.length; index += 1) {
+		if (actual[index] !== minimum[index]) return actual[index] > minimum[index];
+	}
+	return true;
+}

package/scripts/config.mjs

@@ -169,6 +169,7 @@ function printStatus() {
 	console.log("Effective config:");
 	console.log(`  webSearch.enabled: ${state.webSearchEnabled ? "true" : "false"}`);
 	console.log(`  webSearch.preferredProvider: ${state.config.webSearch?.preferredProvider ?? `auto (default ${DEFAULT_WEB_SEARCH_PROVIDER})`}`);
+	console.log(`  webSearch.defaultSearchType: ${state.config.webSearch?.defaultSearchType ?? "not configured (Exa auto)"}`);
 	for (const provider of WEB_SEARCH_PROVIDERS) {
 		const field = getWebSearchProviderConfigKey(provider);
 		console.log(`  webSearch.${field}: ${getCredentialSourceSummary(state.webSearchCredentialSources[provider], provider)}`);

package/scripts/doctor.mjs

@@ -4,7 +4,7 @@
  * Responsibilities: Check upstream agent-browser PATH/version, inspect Pi settings for duplicate package/checkout sources, and print actionable remediation.
  * Scope: Read-only package diagnostics only; upstream browser runtime health remains the responsibility of upstream `agent-browser doctor`.
  * Usage: Run via `pi-agent-browser-doctor`, `npm exec --package pi-agent-browser-native -- pi-agent-browser-doctor`, or `npm run doctor` from this repository.
- * Invariants/Assumptions: The wrapper targets TARGET_AGENT_BROWSER_VERSION, does not bundle agent-browser, and must not edit Pi settings or run fixing commands.
+ * Invariants/Assumptions: The wrapper recommends TARGET_AGENT_BROWSER_VERSION, enforces the configured stable version floor, does not bundle agent-browser, and must not edit Pi settings or run fixing commands.
  */
 
 import { execFile as execFileCallback } from "node:child_process";
@@ -16,7 +16,7 @@ import { fileURLToPath } from "node:url";
 import { promisify } from "node:util";
 
 import { CAPABILITY_BASELINE_SOURCE } from "./agent-browser-capability-baseline.mjs";
-import { TARGET_AGENT_BROWSER_SOURCE, TARGET_AGENT_BROWSER_VERSION } from "./agent-browser-target.mjs";
+import { MINIMUM_AGENT_BROWSER_VERSION, TARGET_AGENT_BROWSER_SOURCE, TARGET_AGENT_BROWSER_VERSION, isSupportedAgentBrowserVersion } from "./agent-browser-target.mjs";
 
 const execFile = promisify(execFileCallback);
 const PACKAGE_NAME = "pi-agent-browser-native";
@@ -25,7 +25,7 @@ const EXTENSION_ENTRYPOINTS = Object.freeze([
 	"extensions/agent-browser/index.ts",
 	"dist/extensions/agent-browser/index.js",
 ]);
-const EXPECTED_VERSION = TARGET_AGENT_BROWSER_VERSION;
+const RECOMMENDED_VERSION = TARGET_AGENT_BROWSER_VERSION;
 const MINIMUM_PI_VERSION = "0.84.0";
 const DEFAULT_AGENT_DIR = resolve(homedir(), ".pi/agent");
 const THIS_PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
@@ -70,7 +70,7 @@ Options:
 
 Checks:
   1. agent-browser is installed on PATH.
-  2. agent-browser --version matches the package target version.
+  2. agent-browser --version is supported by this package.
   3. pi --version is at least the minimum Pi runtime version for this release.
   4. Pi settings and repo-local autoload locations do not point at multiple active pi-agent-browser-native sources.
 
@@ -341,17 +341,23 @@ async function checkAgentBrowserVersion({ runAgentBrowser }) {
 	try {
 		const rawOutput = await runAgentBrowser(["--version"]);
 		const version = normalizeAgentBrowserVersion(rawOutput);
-		if (version !== EXPECTED_VERSION) {
+		if (!isSupportedAgentBrowserVersion(version)) {
 			return {
 				status: "fail",
-				title: `agent-browser version drift: expected ${EXPECTED_VERSION}, found ${version || "<empty>"}.`,
+				title: `agent-browser version drift: minimum supported ${MINIMUM_AGENT_BROWSER_VERSION}; found ${version || "<empty>"}.`,
 				lines: [
-					`This wrapper targets the current version from ${TARGET_AGENT_BROWSER_SOURCE} and does not provide backwards-compatibility shims.`,
-					`Update upstream agent-browser to ${EXPECTED_VERSION}, or if you intentionally re-baselined upstream, update ${TARGET_AGENT_BROWSER_SOURCE} plus ${CAPABILITY_BASELINE_SOURCE}, run \`npm run docs -- command-reference write\`, refresh docs/COMMAND_REFERENCE.md, and rerun \`npm run verify -- command-reference\` plus \`npm run verify -- real-upstream\` with test/fixtures/agent-browser-real-output-shapes.json aligned to the new target version.`,
+					`This wrapper supports stable agent-browser versions at or above ${MINIMUM_AGENT_BROWSER_VERSION}; ${RECOMMENDED_VERSION} is the current recommendation from ${TARGET_AGENT_BROWSER_SOURCE}.`,
+					`Update upstream agent-browser to ${RECOMMENDED_VERSION}, or if you intentionally re-baselined upstream, update ${TARGET_AGENT_BROWSER_SOURCE} plus ${CAPABILITY_BASELINE_SOURCE}, run \`npm run docs -- command-reference write\`, refresh docs/COMMAND_REFERENCE.md, and rerun \`npm run verify -- command-reference\` plus \`npm run verify -- real-upstream\` with test/fixtures/agent-browser-real-output-shapes.json aligned to the new target version.`,
 				],
 			};
 		}
-		return { status: "pass", title: `agent-browser version matches baseline: ${version}`, lines: [] };
+		return {
+			status: "pass",
+			title: version === RECOMMENDED_VERSION
+				? `agent-browser version matches recommended baseline: ${version}`
+				: `agent-browser version meets supported floor: ${version} (recommended ${RECOMMENDED_VERSION})`,
+			lines: [],
+		};
 	} catch (error) {
 		const code = error && typeof error === "object" ? error.code : undefined;
 		return {

package/dist/extensions/agent-browser/lib/managed-session-capabilities.js

@@ -1,20 +0,0 @@
-const MANAGED_SESSION_RESTORE_KEY_PATTERN = /piab-r(?:2)?-[a-f\d]{32}/gi;
-const MANAGED_SESSION_RESTORE_KEY_EXACT_PATTERN = /^piab-r2-[a-f\d]{32}$/i;
-const WRAPPER_MANAGED_SESSION_PREFIX = "piab-";
-export function isWrapperManagedSessionName(value) {
-    return typeof value === "string" && value.toLowerCase().startsWith(WRAPPER_MANAGED_SESSION_PREFIX);
-}
-export function isManagedSessionRestoreKey(value) {
-    return typeof value === "string" && MANAGED_SESSION_RESTORE_KEY_EXACT_PATTERN.test(value);
-}
-export function extractManagedSessionRestoreKeys(value) {
-    return [...new Set(value.match(MANAGED_SESSION_RESTORE_KEY_PATTERN)?.map((key) => key.toLowerCase()) ?? [])];
-}
-export function containsManagedSessionRestoreKey(value) {
-    MANAGED_SESSION_RESTORE_KEY_PATTERN.lastIndex = 0;
-    return MANAGED_SESSION_RESTORE_KEY_PATTERN.test(value);
-}
-export function redactManagedSessionRestoreKeys(value) {
-    MANAGED_SESSION_RESTORE_KEY_PATTERN.lastIndex = 0;
-    return value.replace(MANAGED_SESSION_RESTORE_KEY_PATTERN, "[REDACTED MANAGED STATE]");
-}